Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

firewall intrusion alert


  • Please log in to reply

#1
okeee

okeee

    Member

  • Member
  • PipPipPip
  • 157 posts
I use Agnitum Outpost and all of a sudden I received this message:

17:14:26 Intruder blocked Rst attack detected from 211.210.231.163 -> 211.210.231.163

I'm quite worried, does this mean that someone tried to hack the pc, and the firewall prevented it? Do I need to take some action?
  • 0

Advertisements


#2
hary

hary

    Member

  • Member
  • PipPip
  • 94 posts
A reset attack, check out one opinion here.

Also search Google for: agnitum outpost + rst attack .. for other ideas.
  • 0

#3
dsenette

dsenette

    Je suis Napoléon!

  • Administrator
  • 26,019 posts
  • MVP
that ip comes up as being from Korea-KR [City: Seoul, Kyonggi-Do]
  • 0

#4
okeee

okeee

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 157 posts
Are you certain that the IP is from Korea, because I live in Europe. Could the IP-adres maybe be changed? I received the notice while I was in a belgian chatroom. Also, I do not visit Korean sites or have an argument with someone from Korea.
  • 0

#5
dsenette

dsenette

    Je suis Napoléon!

  • Administrator
  • 26,019 posts
  • MVP

Are you certain that the IP is from Korea, because I live in Europe. Could the IP-adres maybe be changed? I received the notice while I was in a belgian chatroom. Also, I do not visit Korean sites or have an argument with someone from Korea.

sorry...i didn't mean to confuse you...that was meant more as an fyi...it likely means that your firewall did it's job and actually stopped a real attack...and that it wasn't a false alarm...the main thing is that your firewall DID block it...which means technically if it only happened once..you don't really need to be that concerned
  • 0

#6
okeee

okeee

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 157 posts
I see. but can IP be changed, so that it seems that the IP is from somewhere else? Such as, someone in Sweden changing his IP-adres in an IP-adres from Korea, so that he can't be tracked?

Edited by okeee, 13 August 2006 - 01:26 PM.

  • 0

#7
Johanna

Johanna

    The Leather Lady

  • Moderator
  • 3,038 posts
Sure. To do that you use a proxy service.

Many of those kind of attacks are random automated programs, not specifically targeting you, just whatever computers they can get into. Your firewall recognized it as a threat, and blocked it. Don't lose sleep.
Johanna
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP